full-disclosure - Re: getting administrator rights on win2003 machine?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200410281541.05249.rik.bobbaers@cc.kuleuven.ac.be>
From: rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote)
Subject: Re: getting administrator rights on win2003 machine?

Op Thursday 28 October 2004 15:08, Valentin H?bel sgreifde:
> > Hi folks,
> >
> > I'm at a boarding school in germany and we have a kind of internet
> > terminal there with win2003 running on the computers. My question is:
> > Is there a way of getting administrative privileges ? I used a RPC
> > Exploit before but now the computers are patched. How do I get a
> > administrator account now?? I have physikal access to the
> > computers.....

use knoppix to boot from, mount the ntfs filesystem, and search the net for 
which keys in registry you have to change. there may be other files too that 
you have to change

there even are special bootcd's that are made only for the purpose of changing 
the admin pass etc...

-- 
harry
aka Rik Bobbaers

K.U.Leuven - LUDIT             -=- Tel: +32 485 52 71 50
Rik.Bobbaers@...kuleuven.ac.be -=- http://harry.ulyssis.org

"\x41\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x77\x69\x74\x68\x6f\x75\x74\x20"
"\x57\x69\x6e\x64\x6f\x77\x73\x20\x69\x73\x20\x6c\x69\x6b\x65\x20\x61\x20\x66"
"\x69\x73\x68\x20\x77\x69\x74\x68\x6f\x75\x74\x20\x61\x20\x62\x69\x63\x79\x63"
"\x6c\x65\x0a\x00"